Commit Graph
10542 Commits
Author SHA1 Message Date
Rich Megginson f02d1429ca add update to fix the index for the winsync attributes 2008-10-13 14:09:15 -04:00
Rich Megginson 5c56c43693 do not store the OUs from the AD DN in the IPA user entry when flattening 2008-10-13 14:09:14 -04:00
Rich Megginson 9f18858e58 add --win-subtree argument to ipa-replica-manage 2008-10-13 14:09:13 -04:00
Rich Megginson 0988e1c53c Do not depend on MMR plugin - start before MMR plugin
The ipa-winsync plugin needs to start before the MMR plugin, so that it
can register the API functions.  Also, the slapi-nis schema compat
plugin creates an entry that looks exactly like the default IPA group
gidNumber entry, so I added an extra (objectclass=groupOfNames) to the
filter since the slapi-nis entry doesn't have that.
2008-10-13 14:09:13 -04:00
Rich Megginson d3637dde7c Just add eq,pres to the existing indices
There are already indexes created for ntUniqueID and ntUserDomainID by default
We just need to make sure they are indexed for equality and presence
2008-10-13 14:09:12 -04:00
Rich Megginson 38154073a8 Don't try to conditionally stop the server - it doesn't seem to work
Just call stop() - if it's not already running, no big deal
2008-10-13 14:09:11 -04:00
Rich Megginson 28195610f6 Add more winsync support to cli
The ipa-replica-manage list, init, and synch commands do not work for winsync
agreements.  This patch adds that support and some additional verbose logging.

The synch_master did not work correctly.  The way it should work is to set
the replication schedule to some bogus value, then reset it back to its
original setting.  This will force replication to take place immediately.
2008-10-13 14:09:10 -04:00
Rich Megginson 068ed81195 Do not add enabled user to activated group - clean up parse_acct_disable
If a user needs to be enabled, just delete the user from the inactivated group,
but do not add to the activated group.  If a user is in no group, the user is
active by default.  IPA uses the activated group for override purposes.

parse_acct_disable is only used when the config changes, but I cleaned it
up anyway to make the code clearer.
2008-10-13 14:09:10 -04:00
Rich Megginson 0e346ff6fb add winsync options to ipa-replica-manage man page 2008-10-13 14:09:09 -04:00
Rich Megginson 69180c2dcc Adds winsync account disable and force sync 2008-10-13 14:09:08 -04:00
Rich Megginson e8bebebc23 fix issues brought up by initial review of ipa winsync enhancements 2008-10-13 14:09:08 -04:00
Rich Megginson be5e783f72 add --no-host-dns option to ipa-server-install - allows specifying a hostname that might actually exist but you do not want to even attempt to resolve it via DNS 2008-10-13 14:09:07 -04:00
Rich Megginson 5a5bfa2c70 Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-10-13 14:09:07 -04:00
Rich Megginson 2a2bc851bd The library name is libipa_winsync not libipa-winsync 2008-10-13 14:09:06 -04:00
Rich Megginson 434f9aca6a Use dirsrv/file.h with includes by default - only use the other style if we are debugging within the directory server 2008-10-13 14:09:05 -04:00
Rich Megginson 4bc89c427e fix some memory leaks 2008-10-13 14:09:04 -04:00
Rich Megginson c80ecc8c2a Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-10-13 14:09:04 -04:00
Rich Megginson 61b5a95dd1 Added support for posixAccount -lookup attribute containing the homeDirectory prefix and use that to construct the homeDirectory attribute -lookup attribute containing the default gidNumber and use that to add the gidNumber to new users -construct the gecos field from the cn attribute 2008-10-13 14:09:03 -04:00
Rich Megginson 6454956d51 Added the new IPA WinSync Plug-in Work done so far * added the new plugin to makefiles, spec file * added stubs for the api, including begin update, end update, and destroy callbacks * added config code to allow dynamic dse config changes and auto-discovery of realm and new user objectclass list 2008-10-13 14:09:03 -04:00
Rich Megginson 0951496593 Initial addition of ipa-winsync plugin 2008-10-13 14:09:02 -04:00
Jason Gerard DeRose 225e2b0c93 Added CrudBackend abstract class defining generic CRUD API 2008-10-13 09:50:29 -06:00
Rob Crittenden 39ad5ccffa Stub out delegations
Add ACI class
2008-10-11 00:49:05 -04:00
Rob Crittenden 250734aea5 Fix syntax error 2008-10-10 14:38:09 -04:00
Rob Crittenden 75bad44c27 Enable the verbose flag to pass thru xmlrpc 2008-10-10 05:23:00 -04:00
Rob Crittenden 42cdca3e83 Use new options handler 2008-10-10 03:40:52 -04:00
Rob Crittenden dbe49423ab Start service principal plugin 2008-10-10 03:36:57 -04:00
Rob Crittenden 5d2a99925d Implement group-mod 2008-10-10 03:36:57 -04:00
Rob Crittenden 8a97b3e8a8 Implement group-del 2008-10-10 03:36:57 -04:00
Rob Crittenden 5c07d97865 Slight change to how exceptions are handled 2008-10-10 03:36:57 -04:00
Rob Crittenden 83bb41faeb Mechanism to convert from xmlrpclib.Fault to an IPAError exception
Include slew of new exceptions, not all of which are used yet
2008-10-10 03:36:56 -04:00
Rob Crittenden 672c07566d Implement user-del
rename is_user_unique() to user_exists()
2008-10-10 03:36:56 -04:00
Rob Crittenden 3e505cc908 Remove some dead code 2008-10-10 03:36:56 -04:00
Jason Gerard DeRose 87390665f6 crud.Add.get_args() and get_options() now yield static values in takes_args, takes_options after the automagic ones 2008-10-09 11:33:35 -06:00
Jason Gerard DeRose 887016e69d Base Command.execute() method now raises NotImplementedError; updated unit tests 2008-10-08 18:18:13 -06:00
Jason Gerard DeRose b7fe92f44f Reorganized Command methods so it is easier to understand and added lots of docstrings 2008-10-08 18:01:22 -06:00
Martin Nagy 83fa46a706 ipa-pwpolicy: correctly compare minlife and maxlife Fixes: 463849 2008-10-08 16:44:51 +02:00
Martin Nagy 574ca532b5 Fix a typo in ipa-modgroup causing it to fail Fixes: 463567 2008-10-08 16:44:51 +02:00
Jason Gerard DeRose bc9edbfdf6 Changed sub-package docstrings in tests/ to make consintent with other packages 2008-10-08 01:30:52 -06:00
Jason Gerard DeRose b246dbabcf PEP 257: cleaned up docstrings in test_ipa_types.py 2008-10-08 01:24:39 -06:00
Jason Gerard DeRose 048678fc77 Fixed two PEP 257 violations I missed in test_plugable.py 2008-10-08 01:00:44 -06:00
Jason Gerard DeRose ad2cd6560b PEP 257: cleaned up docstrings in test_frontend.py 2008-10-08 00:58:53 -06:00
Jason Gerard DeRose 33648655fe PEP 257: cleaned up docstrings in test_errors.py 2008-10-08 00:41:08 -06:00
Jason Gerard DeRose 7599beb693 Restructured test_crud.py around new CrudChecker base class 2008-10-08 00:17:32 -06:00
Jason Gerard DeRose f5ea3b1bb9 Made docstrings in test_crud.py contistent with rest 2008-10-07 23:36:58 -06:00
Jason Gerard DeRose 0d2b5a8892 PEP 257: cleaned up docstrings in test_config.py 2008-10-07 23:31:40 -06:00
Jason Gerard DeRose 9bff91fc08 PEP 257: cleaned up docstrings in test_cli.py 2008-10-07 23:29:42 -06:00
Jason Gerard DeRose 97634e18c7 PEP 257: cleaned up docstrings in test_plugable.py 2008-10-07 23:20:00 -06:00
Jason Gerard DeRose ac9597ddcb Renamed webui-cherry.py, simple-server.py to lite-webui.py, lite-xmlrpc.py respectively 2008-10-07 23:01:11 -06:00
Jason Gerard DeRose 6489e4f348 Renamed gen-doc.bash, run-tests.bash to make-doc, make-test respectively 2008-10-07 22:45:32 -06:00
Jason Gerard DeRose fec6fc2e8c Fixed example in raise_TypeError() docstring (thanks, mnagy) 2008-10-07 22:35:45 -06:00